actix (>=0.5.0 <=0.7.7), actix-ogn (=0.1.0) +270 more potentially affected by CVE-2019-15553 via memoffset (>=0.1.0 <=0.2.1)

memoffset CARGO version =0.1.0, =0.5.0, =0.7.5, =0.2.5, =0.4.0, =0.9.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0, =0.4.0, =0.7.0 and more Source cves: CVE-2019-15553 Source advisory: OSV:RUSTSEC-2019-0011...

@dojo/cli-test-intern (>=0.1.0 <=2.0.0-beta3.1), elstr-jslib (>=3.0.18 <=3.0.47) +25 more potentially affected by CVE-2019-10744 via lodash-amd (>=2.4.1 <=4.16.4)

lodash-amd NPM version =2.4.1, =0.1.0, =3.0.18, =0.4.0, =4.1.1, =0.1.11, =3.4.0, =0.0.1, =0.7.1, =0.1.1, =0.2.5, =0.0.3, =0.1.10, =0.1.6, =0.1.1, =0.1.4 and more Source cves: CVE-2019-10744 Source advisory: OSV:GHSA-JF85-CPCP-J695...

@astro-my/design-systems (>=0.3.14 <=0.4.42), @astro-my/design-systems-aw (>=0.4.63 <=0.4.64) +143 more potentially affected by CVE-2019-10744 via lodash-es (>=3.0.0 <=4.17.12)

lodash-es NPM version =3.0.0, =0.3.14, =0.4.63, =0.1.1, =0.1.1, =0.3.2-a, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.24 - @astro-my/design-systems-xuan-ts =0.1.1 and more Source cves: CVE-2019-10744 Source advisory: OSV:GHSA-JF85-CPCP-J695...

wicked-saml (>=0.10.0 <=0.11.3) potentially affected by CVE-2017-11429 via saml2-js (=1.10.0)

saml2-js NPM version =1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on saml2-js and may be impacted: - wicked-saml =0.10.0, =0.11.3 Source cves: CVE-2017-11429 Source advisory: OSV:GHSA-5P5W-J3G7-W4WV...

h2 (=1.0.0) potentially affected by CVE-2016-6581 via hpack (=1.1.0)

hpack PYPI version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - h2 =1.0.0 Source cves: CVE-2016-6581 Source advisory: OSV:GHSA-FFQ8-576R-V26G...

com.github.igor-suhorukov:git-configuration (=1.0), com.mageddo:spring-hawtio (>=2.0.2 <=2.3.0_1.2.0) +72 more potentially affected by CVE-2019-9827 via io.hawt:hawtio-core (>=1.1 <=2.4.0)

io.hawt:hawtio-core MAVEN version =1.1, =2.0.2, =2.0.21, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =1.1.0.Beta1, =1.1.0.Beta1, =1.1.0.Beta1, =2.0-M3, =2.17.7 and more Source cves: CVE-2019-9827 Source advisory: OSV:GHSA-MCG9-64CP-XWP7...

aero.champ:cargojson (=1.0), ai.active:webhook-sdk (>=1.0.0 <=1.0.4) +30542 more potentially affected by CVE-2019-12384 via com.fasterxml.jackson.core:jackson-databind (>=2.9.0 <=2.9.9)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.9.0, =1.0.0, =4.4.0.0, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =local, =local, =0.0.6, =0.0.1, =0.1.2, =0.1.7 - ai.genauth:genauth-java-sdk =3.1.11 - ai.grakn.kgms:client =1.4.3 and more Source cves: CVE-2019-12384 Sour...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8 <=0.1.12), ai.snips:play-mongo-bson_2.12 (>=0.5 <=0.5.1) +6217 more potentially affected by CVE-2019-12384 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0 <=2.8.11.3)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.1.8, =0.5, =2.3.0, =1.5.6, =4.2.1, =4.4.1, =1.0.0.RELEASE, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.4, =0.9 and more Source cves: CVE-2019-12384 Source advisory: OSV:GHSA-MPH4-VHRX-MV67...

com.antgroup.tugraph:calcite-geode (>=1.18.0-geaflow_1.0 <=1.18.0-geaflow_1.1), com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10 <=2.0.2) +81 more potentially affected by CVE-2017-15694 via org.apache.geode:geode-core (>=1.0.0-incubating <=1.8.0)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating, =1.18.0-geaflow1.0, =0.10, =0.10, =1.1.0, =1.0-M3, =1.21.0.138, =0.3.12, =0.3.5, =0.1.9, =2.2.0, =1.0.0, =1.1.0 - io.pivotal.services.dataTx:gemfire-extensions-spring-security =1.0.0 and more Source cves: CVE-2017-15694 Source advisory:...

configly (>=5.0.0 <=5.0.1) potentially affected by CVE-2019-10750 via deeply (=3.0.0)

deeply NPM version =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on deeply and may be impacted: - configly =5.0.0, =5.0.1 Source cves: CVE-2019-10750 Source advisory: SNYK:JS-DEEPLY-451026...

-price-checker (>=1.0.0 <=1.0.5), 0pflow (>=0.1.0-dev.0de2bc6 <=0.1.0-dev.f5622ac) +20557 more potentially affected by unknown CVE via open (>=0.0.2 <=11.0.0)

open NPM version =0.0.2, =1.0.0, =0.1.0-dev.0de2bc6, =2.5.0, =0.3.5, =0.1.0, =1.0.0, =0.3.96, =2.0.0, =2026.1.31, =0.1.0, =0.0.0, =1.0.0, =0.1.0, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-28XH-WPGR-7FM8...

@activeledger/activecore (>=2.0.0-rc5 <=2.0.0-rc.8.0.6), @aktr/node-module-a (=1.0.1) +195 more potentially affected by unknown CVE via swagger-ui (>=2.0.17 <=3.13.3)

swagger-ui NPM version =2.0.17, =2.0.0-rc5, =1.4.0, =0.0.4, =1.0.2, =7.0.0, =1.3.0, =3.0.0-alpha.0, =0.7.2, =3.0.1, =2.0.0, =0.0.1, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-X9P2-FXQ6-2M5F...

@aaa-backend-stack/graphql (>=1.16.1 <=2.4.4), @aaa-backend-stack/graphql-rest-bindings (>=1.16.0 <=1.16.9) +102 more potentially affected by CVE-2019-10749 via sequelize (>=3.0.1 <=3.34.0)

sequelize NPM version =3.0.1, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.12.0, =1.0.22, =2.0.10, =1.0.97, =1.6.489, =1.6.735 and more Source cves: CVE-2019-10749 Source advisory: SNYK:JS-SEQUELIZE-450222...

@maxts/waterline-adapter-tests (=1.0.3), driver-interface (=1.0.2) +9 more potentially affected by CVE-2019-10744 via @sailshq/lodash (=3.10.2)

@sailshq/lodash NPM version =3.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on @sailshq/lodash and may be impacted: - @maxts/waterline-adapter-tests =1.0.3 - driver-interface =1.0.2 - machinepack-sockets =2.0.0, =5.2.0-0, =1.0.1, =0.9.1, =2.1.14,...

@astro-my/design-systems (>=0.3.14 <=0.4.42), @astro-my/design-systems-aw (>=0.4.63 <=0.4.64) +97 more potentially affected by CVE-2019-10744 via lodash-es (>=4.0.0 <=4.17.11)

lodash-es NPM version =4.0.0, =0.3.14, =0.4.63, =0.1.1, =0.1.1, =0.3.2-a, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.24 - @astro-my/design-systems-xuan-ts =0.1.1 and more Source cves: CVE-2019-10744 Source advisory: SNYK:JS-LODASHES-2434290...

clam-util (>=0.0.5 <=0.1.20), generator-clam (>=0.1.68 <=0.1.86) +2 more potentially affected by CVE-2019-10746 via mixin-deep (=1.0.1)

mixin-deep NPM version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mixin-deep and may be impacted: - clam-util =0.0.5, =0.1.68, =0.3.0, =0.4.12 - grunt-formatdata =0.1.1 Source cves: CVE-2019-10746 Source advisory: SNYK:JS-MIXINDEEP-450212...

@peak-stone/vue-admin (>=1.0.1 <=2.1.1) potentially affected by CVE-2019-10745 via assign-deep (=1.0.0)

assign-deep NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on assign-deep and may be impacted: - @peak-stone/vue-admin =1.0.1, =2.1.1 Source cves: CVE-2019-10745 Source advisory: SNYK:JS-ASSIGNDEEP-450211...

com.alexbt:springboot-autoconfigure-openid-oauth (=1.0.9), com.appdirect:service-integration-sdk (>=1.24 <=v11.129.7) +11 more potentially affected by CVE-2019-11269 via org.springframework.security.oauth:spring-security-oauth (>=2.0.10.RELEASE <=2.0.17.RELEASE)

org.springframework.security.oauth:spring-security-oauth MAVEN version =2.0.10.RELEASE, =1.24, =1.4.3, =2.7.4.7, =2.7.4.7, =2.7.4.7, =3.3.0.4, =3.3.0.4, =2.7.4.7, =4.4.0 Source cves: CVE-2019-11269 Source advisory: OSV:GHSA-MMF6-6597-3V6M...

br.eti.clairton:ds-test (>=0.4.0 <=1.2.1), br.jus.stf.digital:core (>=2.0.0 <=2.3.1) +1773 more potentially affected by CVE-2019-3888 via io.undertow:undertow-core (>=1.0.0.Alpha1 <=2.0.20.Final)

io.undertow:undertow-core MAVEN version =1.0.0.Alpha1, =0.4.0, =2.0.0, =1.0, =1.0, =3.0.0.RELEASE, =0.0.1-jdk1.8-RELEASES, =0.0.1-jdk1.8-RELEASES, =0.1.4-jdk1.8-RELEASES, =0.0.4, =0.2.7, =0.0.1, =1.0.1.U1 and more Source cves: CVE-2019-3888 Source advisory: OSV:GHSA-JWGX-9MMH-684W...

ids-enterprise-ng (>=4.7.0 <=9.5.2), sohoreact (>=1.0.0 <=1.0.3) potentially affected by unknown CVE via ids-enterprise (>=4.10.0-beta.0 <=4.18.1)

ids-enterprise NPM version =4.10.0-beta.0, =4.7.0, =1.0.0, =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-49R3-3H96-RWJ6...